hz666 Privacy Policy — Your Data, Our Responsibility

1. About This Privacy Policy

hz666 is committed to protecting the privacy and personal data of all players who use the hz666 online casino and sports betting platform. This Privacy Policy applies to all services offered through hz666.org, including account registration, deposits and withdrawals, casino games, sports betting, live chat, customer support, and any promotional communications you opt into.

This policy should be read alongside the hz666 Terms & Conditions, which govern the overall contractual relationship between you and hz666. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall prevail.

hz666 acts as the data controller for all personal data collected through the hz666 platform. This means hz666 is responsible for determining the purposes for which and the means by which your personal data is processed. hz666 processes personal data in accordance with its obligations under its international gaming licence and applicable data protection frameworks.

2. Personal Data We Collect

hz666 collects personal data from you directly when you register an account, use the platform, or contact our support team, and indirectly through automated technical processes when you browse or interact with the hz666 website. Below is a detailed breakdown of the categories of personal data we collect.

2.1 Registration & Identity Data

When you create an hz666 account, we collect the following information to establish and verify your identity:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify that you are aged 21 or above)
• Email address (used for account authentication and communication)
• Pakistani mobile phone number (used for two-factor authentication and account recovery)
• Residential address (city, province — for example, Karachi, Lahore, Islamabad, Faisalabad)
• Username and password (password is stored in hashed, non-recoverable form)

2.2 Identity Verification (KYC) Documents

To comply with our Know Your Customer (KYC) obligations under our gaming licence, hz666 may request copies of the following documents at registration, prior to processing withdrawals, or at any other point our compliance team requires:

• National Identity Card (CNIC) — front and back
• Passport (biographical data page)
• Driving licence
• Utility bill or bank statement dated within the past 90 days (as proof of address)

2.3 Financial & Transaction Data

hz666 collects transaction data related to your deposits and withdrawals, including:

• Payment method type (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Debit Card, Credit Card)
• Transaction amounts in PKR, dates, and reference numbers
• Masked payment instrument identifiers (e.g., last four digits of card number) — full card numbers are never stored by hz666
• Deposit and withdrawal history associated with your account

2.4 Gaming & Betting Activity Data

hz666 maintains a complete record of your gaming and betting activity on the platform, including:

• Bets placed, games played, wager amounts, and outcomes
• Session start and end times, and total session duration
• Bonus activations and wagering completion records
• Self-exclusion requests, deposit limit settings, and other responsible gaming tool activations

2.5 Technical & Device Data

When you access the hz666 platform, our servers and analytics tools automatically collect certain technical data, including:

2.6 Communications Data

If you contact hz666 via live chat, email, or any other support channel, we retain records of those communications including the content of your messages, your contact details, the date and time of correspondence, and any resolution or outcome reached. This data is used to provide ongoing support and to improve our customer service quality.

3. How We Use Your Personal Data

hz666 uses your personal data for the following purposes. For each purpose, we have identified the legal basis on which that processing activity is conducted (see Section 4 for full details of legal bases).

• Account Registration & Management: To create and maintain your hz666 account, verify your identity, and enable access to platform services.
• Age & Identity Verification: To confirm that you are aged 21 or above before granting access to real-money gaming, in compliance with our gaming licence obligations.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payments, and to process withdrawal requests to your verified payment method.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised account access.
• Responsible Gaming Compliance: To monitor player behaviour for indicators of problem gambling, apply player-requested deposit limits and self-exclusion restrictions, and intervene where required under our licence obligations.
• Customer Support: To respond to your queries, resolve complaints, and provide technical assistance.
• Legal & Regulatory Compliance: To comply with the requirements of our international gaming licence, anti-money laundering regulations, and any lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the hz666 platform, optimise game selection, and enhance the player experience.
• Promotional Communications: To send you information about bonuses, promotions, and platform updates — but only where you have opted in to receive marketing communications. You may opt out at any time.

4. Legal Basis for Processing

hz666 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and hz666, including account management, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing required for hz666 to comply with its legal and regulatory obligations, including KYC identity verification, AML monitoring, and gaming licence compliance requirements.
• Legitimate Interests: Processing carried out in pursuit of hz666's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Where hz666 processes your data on the basis of your consent — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing & Third Parties

hz666 does not sell, rent, or otherwise disclose your personal data to third parties for their own marketing or commercial purposes. Your personal data is shared with third parties only in the following limited circumstances:

5.1 Service Providers

hz666 works with a number of third-party service providers who process personal data on our behalf in order to operate the platform. These include payment processors (including partners facilitating JazzCash, EasyPaisa, and bank transfers), KYC and identity verification providers, cloud infrastructure and hosting providers, customer support software providers, and fraud detection and anti-money laundering screening services. All service providers are contractually required to process personal data only on hz666's instructions and to maintain appropriate data security measures.

5.2 Regulatory & Law Enforcement Authorities

hz666 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by law, regulation, court order, or the requirements of our gaming licence. hz666 will, where legally permissible, notify affected players of such disclosures.

5.3 Gaming Licence Obligations

As part of our obligations under our international gaming licence, hz666 may be required to share certain player data — including responsible gaming and self-exclusion records — with our licensing authority or with recognised responsible gaming schemes.

5.4 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving hz666, player personal data may be transferred to the successor entity. In such circumstances, hz666 will provide reasonable advance notice to affected players and ensure that the receiving entity is bound by data protection obligations at least as protective as those in this Privacy Policy.

6. Data Retention

hz666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymisation is not technically feasible, data is securely destroyed in accordance with hz666's internal data disposal procedures.

7. Cookies & Tracking Technologies

hz666 uses cookies and similar technologies (such as local storage and session tokens) on the hz666.org website. Cookies are small text files placed on your device when you visit a website. They serve several important functions on the hz666 platform.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your account and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming tool configurations.
• Analytics Cookies: Allow hz666 to understand how players navigate and use the platform so we can improve it. Analytics data is aggregated and anonymised — it does not identify you personally. hz666 uses first-party analytics only and does not use third-party advertising analytics services.

7.2 Cookie Management

You can control non-essential cookies through the cookie preferences panel accessible from the footer of the hz666 website. You can also manage cookies through your browser settings — most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using the hz666 platform.

7.3 No Advertising Cookies

hz666 does not use third-party advertising cookies, retargeting pixels, or social media tracking technologies on the hz666.org platform. We do not track your browsing activity outside of hz666.org for advertising purposes.

8. Data Security

hz666 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes:

• TLS Encryption: All data transmitted between your device and hz666 servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• At-Rest Encryption: Personal data stored in hz666 databases is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing — hz666 cannot retrieve your password in plain text, and neither can anyone else.
• Two-Factor Authentication (2FA): hz666 offers optional 2FA for all accounts, adding an additional layer of protection to your login process.
• Access Controls: Personal data is accessible only to hz666 employees and service providers who have a legitimate need to access it in connection with their role. Access is governed by role-based permissions and monitored via audit logs.
• Regular Security Reviews: hz666 conducts periodic security assessments and penetration testing of the platform to identify and remediate vulnerabilities.
• PCI-DSS Compliance: Payment card data is handled exclusively by PCI-DSS certified payment processors. hz666 never stores full card numbers on its own servers.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, hz666 will notify affected players in accordance with applicable data breach notification requirements.

9. Your Data Protection Rights

As an hz666 player, you have the following rights in respect of your personal data. These rights are not absolute and may be subject to limitations where hz666 has overriding legal obligations (such as regulatory record-keeping requirements).